仅使用会话中的令牌来验证向php脚本发出jQuery post请求是否安全？

简言之，我试图做的是从一个单击的html元素发出一个jQuery POST请求，该元素具有一个加密的数据属性uid，并通过jQuery POST请求将这个加密的数据属性uid发送到一个getData.php文件，该文件解密uid，并使用解密的uid从数据库查询并返回json编码的结果

下面是.html文件将包含的内容：

<div data-uid="YshZrKI4qWCHBUnX3vd/Aw==" class="request" style="border:5px solid black;">
    uid is encrypted with AES-128-CBC
</div>

pull/data.php看起来像这样：

//some kind of verification here? 
if($_SESSION['User']['Token'] == SomeKindOfValidationFunc()) // Would this make it more secure?
    include_once '../databack.php';
    include_once '../keys/request.key.php'; // contains static key and iv
    $key = $evalrequest_key;
    $iv = $evalrequest_iv;

    $id = openssl_decrypt($_POST['uid'], 'AES-128-CBC', $key,0,$iv);
    $results = Get("SELECT * FROM tableX"); //just returns an associative array of results from db

    echo json_encode($results);

---

这项技术安全吗？

您所说的“安全”是什么意思？从这个意义上说，不是每个人都可以使用jquery从数据库中提取数据。请参阅您所说的“安全”是什么意思？从这个意义上说，不是每个人都可以使用jquery从数据库中提取数据。请参阅

//some kind of verification here? 
if($_SESSION['User']['Token'] == SomeKindOfValidationFunc()) // Would this make it more secure?
    include_once '../databack.php';
    include_once '../keys/request.key.php'; // contains static key and iv
    $key = $evalrequest_key;
    $iv = $evalrequest_iv;

    $id = openssl_decrypt($_POST['uid'], 'AES-128-CBC', $key,0,$iv);
    $results = Get("SELECT * FROM tableX"); //just returns an associative array of results from db

    echo json_encode($results);